Lucene search
+L

18921 matches found

Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.10 views

PT-2025-41829

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows for...

6.5CVSS7.1AI score0.00768EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.7 views

PT-2025-41835

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remote authenticated attacker can potentially read arbitrary data from the database. The issue allows for unauthoriz...

6.5CVSS7.2AI score0.00769EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.8 views

PT-2025-41832

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows unauthorized...

6.5CVSS7.1AI score0.0162EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.9 views

PT-2025-41834

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remote authenticated attacker can potentially read arbitrary data from the database. The issue allows unauthorized...

6.5CVSS7.2AI score0.00768EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.7 views

PT-2025-41803

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.3.4 through 7.4.3.111 Liferay DXP versions 2023.Q4.0 through 2023.Q4.5 Liferay DXP versions 2023.Q3.1 through 2023.Q3.8 Liferay Portal versions 7.4 GA through update 92 Description An Insecure Direct Object Referenc...

5.3CVSS6.4AI score0.00282EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/10/11 1:05 p.m.8 views

CVE-2025-62238

Stored cross-site scripting XSS vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticated attackers to inject...

4.8CVSS5.4AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/10 3:31 p.m.13 views

EUVD-2025-33719

Liferay Portal is vulnerable to XSS through its workflow process builder...

4.6CVSS5.8AI score0.0021EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/10/10 3:31 p.m.13 views

Liferay Portal is vulnerable to XSS through its workflow process builder

Cross-site scripting XSS vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticated attackers to inject arbitrary web script or HT...

5.4CVSS6AI score0.0021EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/10/10 1:15 p.m.11 views

CVE-2025-62239

Cross-site scripting XSS vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticated attackers to inject arbitrary web script or HT...

5.4CVSS0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/10 12:33 p.m.6 views

CVE-2025-62238

Stored cross-site scripting XSS vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticated attackers to inject...

4.8CVSS5AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.9 views

PT-2025-41476

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description Newforma Info Exchange NIX includes a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files. These SVG files can contain JavaScrip...

5.5CVSS6.4AI score0.00201EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/10/07 11:13 p.m.16 views

CVE-2025-43824

The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...

4.8CVSS6.8AI score0.00218EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:31 a.m.25 views

EUVD-2025-32592

The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...

4.8CVSS6.3AI score0.00218EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2012-1665

Malware in sbrugna...

4CVSS6.4AI score0.01094EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-3095

Malware in sbrugna...

4CVSS6.4AI score0.0123EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-5714

Malware in sbrugna...

6.5CVSS6.4AI score0.0121EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-0611

Malware in sbrugna...

3.5CVSS6.6AI score0.01186EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2009-4168

Malware in sbrugna...

6.5CVSS6.4AI score0.00886EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-4292

Malware in sbrugna...

4CVSS6.4AI score0.0159EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-22968

Malware in sbrugna...

8.1CVSS6.5AI score0.01132EPSS
SaveExploits0References2
Rows per page
Query Builder